Explanation of words (definitions)
Personal data we process
Purposes and Basis
Automated decision-making
How long do we keep personal data?
Sharing personal data with third parties
Rights of data subjects
How we secure personal data

Explanation of words (definitions)

Below we explain some of the words or expressions we use in this privacy statement:


The General Data Protection Regulation.

Personal data:

Any information relating to a person by which that person can be reasonably identified.

Processing of Personal Data:

Any actions we perform with Personal Data, such as storing, viewing, modifying, deleting, transferring, and so on.


A company or person who processes (personal) data on our instructions.


The person who is primarily responsible for the processing of personal data under the GDPR: BonsenReuling.

Personal data we process

BonsenReuling processes your personal data because you (client, customer) use our services and/or because you have provided us with those data yourself. Below you will find an overview of the personal data we (may) process:


  • First and last name;
  • Gender;
  • Date of birth;
  • Place of birth;
  • Company name;
  • VAT number;
  • Chamber of Commerce number;
  • Address information;
  • Phone number;
  • E-mail address;
  • IP address;
  • Salary data
  • Bank account number
  • All other data which the Tax Authorities require to be processed in the context of wage/salary administration.
  • Other personal data that you actively provide, for example in correspondence and by telephone;
  • Other personal data that is required by law.

Purposes and Basis

BonsenReuling processes personal data for the following purposes:

  • Processing salaries.
  • Processing administrations.
  • Providing (financial, tax and administrative) advice.
  • To let you use our services.
  • Sending our newsletter.
  • Call or email you if necessary to perform our services.
  • Inform you about changes in our services and products.
  • (To the extent applicable) Inform you about possible positions and vacancies at BonsenReuling.


We use the following bases for processing personal data:

  • consent;
  • performance of a contract;
  • compliance with a legal obligation;
  • legitimate interest.

Automated decision-making

BonsenReuling does not engage in automated decision-making; no decisions are made by computer programs or systems, without a person (for instance an employee of BonsenReuling) for, between or behind it.

How long do we keep personal data?

BonsenReuling will not retain your personal data longer than is necessary to achieve the purposes for which your data are collected or to comply with legal obligations. For example, based on legal tax obligations, we may keep your personal data for 7 to 10 years.

Sharing personal data with third parties

BonsenReuling does not sell personal data to others and will, in compliance with the GDPR, only provide these to third parties if, for example, this is necessary for the execution of our agreement with you or your employer, in order to comply with a legal obligation, or if we receive permission to do so. With persons and companies that process your data on our behalf, we conclude a processor agreement. BonsenReuling remains the processor responsible under the GDPR.


When you visit our website for the first time, we ask your permission to place cookies:


Functional cookies:

These cookies are necessary for the website to function properly. These cookies are used to save certain user and preference settings, save any login information, to facilitate and optimise the use of the website. In addition, these cookies are used to detect misuse of the website.


Social media cookies:

Information on the website can be shared via social media. The social media buttons on the website can be used for this purpose. These function on the basis of social media cookies placed by the social media parties (such as Facebook). By clicking on a social media button, you will be redirected to the website of the social media party in question. For the use of the cookies of the social media parties, we refer to the information about this on the websites of these social media parties. This information may change regularly without our control.


Analytical cookies:

These cookies are used to collect information about the use of the website. Among other things, Google Analytics software is used for this purpose. It measures how many visitors visit the website, at what time the website and pages are visited, from which region the Internet user visits the website, via which other website the visitor arrived at the website, which pages are visited (how long and how often) and in what order and/or error messages have occurred. The data collected are used to optimally tailor the content of the website to the wishes and needs of the users of our services and visitors to our website.


You can opt out of cookies through our website. You can also do so by setting your Internet browser so that it no longer stores cookies. In addition, you can also delete any information previously stored through your browser settings.

Rights of data subjects

You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent for data processing or to object to the processing of your personal data by our company and you have the right to data portability. This means that you can request us to send the personal data we have on you in a computer file to you or another organization named by you.


If you wish to exercise your right of objection and/or right to data portability or have other questions/comments about data processing, please send us a specified request.


To make sure that the request for inspection is made by you, we ask you to send a copy of your ID along with the request. In this copy, black out your passport photo, MRZ (machine readable zone, the strip of numbers at the bottom of the passport), passport number and Citizen Service Number (BSN). This is to protect your privacy. We will respond to your request as soon as possible, but in any case within four weeks.


We hope it will never be necessary, but we would like to point out that you have the possibility to file a complaint with the national regulator, the Authority for Personal Data. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

How we secure personal data

BonsenReuling takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of misuse, please contact us.